fix: remaining 5 high-severity issues — security + error handling

fix: remaining 5 high-severity issues — security + error handling #471